[Tickets #14447] Calendar permissions are not handled correctly

[noreply at bugs.horde.org]

BITTE NICHT AUF DIESE NACHRICHT ANTWORTEN. NACHRICHTEN AN DIESE  
E-MAIL-ADRESSE WERDEN NICHT GELESEN.

Ticket-URL: https://bugs.horde.org/ticket/14447
------------------------------------------------------------------------------
  Ticket           | 14447
  Erstellt Von     | wahnes at uni-koeln.de
  Zusammenfassung  | Calendar permissions are not handled correctly
  Warteschlange    | Kronolith
  Version          | FRAMEWORK_5_2
  Typ              | Bug
  Status           | Unconfirmed
  Priorität        | 2. Medium
  Milestone        |
  Patch            |
  Zuständige       |
------------------------------------------------------------------------------


wahnes at uni-koeln.de (2016-08-15 16:01) hat geschrieben:

When giving another user permissions on a shared calendar, the  
"Delete" permissions are not correctly displayed, which in turn can  
lead to them being removed unexpectedly.

For instance, if you give some user X all but "Delegate" permissions,  
the appropriate rights are saved in the database with perm_{2,4,8,16}  
all set to "1" (assuming the standard case of MySQL and  
"sharesng"-style tables). However, when closing the overlay window and  
returning to it later, there is no check mark displayed in the  
"Delete" column for that user.

Suppose you now add another user Y and give them, say, just Show and  
Read permissions and click on Save (without touching anything else),  
this also leads to user X's Delete permissions being removed because  
X's "Delete" check mark had been removed where it should not have been.

This is happening in Kronolith only, not in the other apps that use a  
seperate browser window to manage rights on shares (Nag, Turba, Mnemo).